View Single Post
Old 10-06-2021, 00:05
DavidXanatos DavidXanatos is online now
Join Date: Jun 2018
Posts: 137
Rept. Given: 1
Rept. Rcvd 32 Times in 22 Posts
Thanks Given: 43
Thanks Rcvd at 279 Times in 91 Posts
DavidXanatos Reputation: 32
This build updates the PH Library to 3.0.4365 and adds fixes various minor bugs.


Important Note:
The driver is now only test signed as the leaked certificate was blacklisted in the windows kernel, hence you need to enable test mode to use all of the features.



added sandboxie tab with a lot of sandboxie related details
added option to freeze and unfreeze entire jobs
added "Original Impersonation Token" menu command to inspect the impersonation token of sandboxed thread
added rpc view listing all rpc endpoints on the system
added windows 11 detection


replaced all icons
updated PHlib to version 3.0.4365


fixed issue resolving kernel symbols introduced with 1.3
Reply With Quote
The Following 2 Users Gave Reputation+1 to DavidXanatos For This Useful Post:
MarcElBichon (10-06-2021), Shub-Nigurrath (10-11-2021)
The Following 2 Users Say Thank You to DavidXanatos For This Useful Post:
niculaita (10-06-2021), wilson bibe (10-06-2021)